Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cfdbplugin contact form db vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2014-7139
Multiple cross-site scripting (XSS) vulnerabilities in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin prior to 2.8.16 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) form or (2) enc parameter in the CF7...
Cfdbplugin Contact Form Db
4.3
CVSSv2
CVE-2015-2040
Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin 2.8.26 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the submit_time parameter in the CF7DBPluginSubmissions page to...
Cfdbplugin Contact Form Db 2.8.26
6.8
CVSSv2
CVE-2015-1874
Cross-site request forgery (CSRF) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin prior to 2.8.32 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that delete all plugin records...
Cfdbplugin Contact Form Db 2.8.31
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started